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(54) HM8<o£#J «S*yh7-^BIE*S 



(57) [K«] 

ctotKJti, f^-eSL^, ^Ph=ivu*efT* 

So ^5K7>Mi, ^S<tt,»jB«fe«fet/f/<X9- 
h*(Oli»t LT/<7/-ji p£±j£7&<, &MMffiM7 
-vt°>?T*MF PK £ P [cfEffl£-t!rfc*S3lF PK ( P ) #4* 
BM<©> ■b-yaiUKosii-eftS*^. * ^ ^ 7 > h 

=7>?M,timm£femtL. zo&mt. f pk ( P ) <t 

(OH-e. fcBMM •»-tr-i?ffilB<D»a**Sfi-r4. 
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i iflZ< 

IF ji <£ 11 OR q £ S PK \ 
THSN fitE4?gg I 

i/ik 

I P FpK(p) i S PK r 

I THEN UUttSS I 
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I I 7 " 6 

[IWj r1 ' 8 
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[«#« 1 ] otMtmmsttmm Lfc* 7 r > h 

E-7^TVh#. 

ffirc-tf— / b **bmi * sit f s x t ? zft , 
Jfci^ro^x h^rtex-/*— t-y hrogift-efc-Sfrif-pfr 

£2fe£-fi>X7^?<!:, 

fJiE^FjBSA^fJiE^X hWt&X-/'?— te-y hflOSHi-efc 

[«*i2] ME<7 7K7>h#\ 
fJE^BBe^fJE^X hWUlX-/*— Mv homm-cib 

£>*§•&. 

&BM2M-7? bf>^BI» F PK £ P lzftm*H:tcti& F 
PK (p) A<i!IJE»BB«<n>^-b-ySH<nS3li-eft4A^ 

F PK (p) ^tuE^lfliiro^ •y-tz-v^r B 1(J)^*^^^^L^ 

l=E«©*ft. 
H***3] Pi*. *6I=. WE*- /< 

t 2 i=E«a>*jas. 

c«*a4] pi*. '>«f<tt, nitwit 

ffi#JS3[::E«a>7jj£<, 

ME^ISSItffJExX h^lfex-/*— fey h<D£SiT?fc 

'J>fc< ttfJE^IStlfc-d: 1/^X7- h*fl)BI»t Lt^ 

^BB»aiHT-y t£y<fM& F PK £ P KttfflS-tffclgSI F 
PK (p) A<frE^BB»<D>»-;-b-i?aH<DS3!ii?*-&A^ 

f pk ( P ) tfmwtfmo* vt-*j£m<Dmmv&& 

Mt^yAfcsiifcBt^bU ^rofSSi:F PK ( P ) 
t(OH-e. ftffiflM •y-b-i?aiH(0»3l**StfT-rSc: 

££tt«fc-fSn#Sl lcE«ro*;i„ 
[B*S6] pli. £blc, PtKbt. KTE-y— /< 
fr&S«Lfc/<5*-*m<DBM[i: L-C±j***i«;i4: 

t 5 i=E«©*jas. 



M*«7] pI*. SJtMfc? 
B*]S6lcE«ro*;i„ 

[lf*H8] mj3J;tj;t(^7>-5!tLtf<7-f 
[B*«9] MEf ^-fTVhtf, 

buE^m^^buE^x hwaix-/'?— try homm-efo 

i*frE»lfl**/<X9- h*(Oli«t(Oli«t L 

^BBesiWT y e>^Bi» f pk £ P *#fcisa f 
pk ( p ) &m&'jkMma>* v-k-v&moEm-eib&fr 

F PK (p) A<BflE^BB«ffl>»-;-b-ySH(DS3l5-eft^ 
/<7>-*q«. BflE^BB«ffl> y-fe-vSfclroHKM 

i- 7 > y a ttrnm t + z> x t- y ? <t . 

q tWE*- /<!=»« -Ti>x^ v -jt $ $ b i=*-rs z 

££Mfc(fc-f 1 l-E«(07jjSo 

M*aio] iiE/<x7-KfflBi«i*s 

-h*©-*lRltt/\vS'iBQ*-e*«^ttW«f*-«ai 
*«9l-E«(7)73j£o 

1] Pi*. *6I=. WE*- 

<t £ «F«t 9 i=E«©*a 0 

2] pi*. ^&<tt,. SHftlc 

7>?AajiOlSi: LT±fiE*tiS-t$1#«fr 

6»#n 1 1 icE«©*a, 
M*ai3] fiE^7^7>s^\ 
flttE^BBa^iiExx hRil)Bx-/<— fey hrosHH-efc 

'J>&< tfJE^BflHt/'U^- h'09Bltt£<Z)lil&£ L 

ttBfl*£Mv v bf >yiift F PK £ P [cftffl StffcfSS F 

P K c p ) tmrn^mmn/ vt-v£ffl<Dmm-efo&fr 

FpK (p) ^fjE^iiflSiro* -ytr-ysFpiro^-efc-s 

UE»BB»* ffl i>r fJE^BBftfl) > ■b-yaiUKOS Jt 

pk ( P ) t(D®X\ »BB»>-y-b-i?aiH(0»3i**S 
^•Scilc^T, q^±(S1-i>x^-v^ 
t. 

q t l&E-tf— /<l=iS«f 4 X^-v^i:^$blc^1-i,z 

l=E*©*ft. 
M*ai4] flE^X9-h'(DHitl*. f!E/^X7 
- K©-*filtt/\t; i/^M®LX>&Z>z t tttnt + Ml 
*S 1 3 [=E«©*tt. 
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t*sftfrsB*ai 3[=E*©*a. 

ftB*H 1 5 [cE«ro£;£„ 

[lf*II17] mj3=t(/f(^7^-?aTf-(7 

he-*- /w. 

hW«lX-/<— try hro^§ft-£-fcft^§fllI£?^7> 
fJIHf ^'TTV hA^bs /^7>-5qtLt, HE&M 

19] HE£ 7 << 7 > h-C^tt < i: t, HE& 

* p i=, aBBftaiw? y tr>?Bi» F^ftffl zvtzm 
SFp, (p) fjiaailB«<n>^-b-i?ffililia)K*-e 

[M** 2 0] HE? 5 << 7 > h V'PK < t tmZ'A 

hf pk (p) a<. mmtemmo* v-t-v^momm-e 

fcftii^s 

mmmtLtcm^t. f PK ( P ) ironn-c, ©bb«>^ 

■b-yaillKoSSiJt^StTLfclSS*/^^-* qiL 

8 [cEUt 

[B*a 2 1 ] he? 7^7>h T?4na < t &mw£ 
P [=. ^rj^r B iv^t°>^m!F PK ^^ffl$-tJ- 

fc£SJ!F PK (p) A<, HE^MSKD* y-fe-v^RHOTg 
7 V? / <7 ^ - 5 q i: LTf It SXf 
[B*H2 2] frE/<X9-K<D«*tt, HE^X9 

-K*(0-*lRltt/N-^>i|i«-eftS^t*!|#«fr4«! 

*i!2 1 [cE« 

[B*H 2 3 ] HE? 7^7>h < <t £HE'^ 



fcg^Fp, (p) A<* HE^FJUroy y-tz-v£F B 1<£>^ 

amm * v m- y am ros k n t ? > * a * us * a fj 

«**HfcLfciSSi:. F PK ( P ) fc©IHif. ^FJtMy 
8[cE«(0*J£„ 

[B*«2 4] frE/<x7-h*<oii«r±. HE/<x? 

- h*<D-*lR]tt/\y ->i||»-eftS^ t £ftftfc-f SB 

*i!2 3icE«ro*5S„ 

[B*n 2 5 ] iHE^BBftBt^*ar± r s a-p& y . 

HE^iMli. HE*- MtioT, 

Nttfc«««fey*#<. 

e(*N«fey**<. 

el±*»-e&S«fc5l=SS?*;h.S-fc£ftftfc-f SB* 
£ 1 8 l=E«ffl*a 0 

[n#« 2 6 ] fjE^BB«Bt^*ar± rs AT*fcy, 

HEfcBfl»±/<7 > -* N fc «fc tf e ^ b it U . 

HE^iMli. HE*- nti^t. 
Nlife-SffllEHrtl-fey . 

eiifc&ttftBAd&y. 

e ttHft-C fcft J: 3 l=jWR * *l« ^ t W« t «M* 
*1 8 KEWOTj&o 
[M*41 2 7 ] fJEaM^Bt^^Sli RSAffcy, 
fuK^Pliltt/^ > n fc <t t/ e Ax c, & y . 
ilE»M«l*. KME-tf— /<l=*o-C. 

N |* fc S ffiSBH ic fc § J: 9 * *i ft - <t t 

[B*II2 8] RSABt-^7JS^fiJfflLfc^7'r7> 

HE f 7^71/ 

flE-9— /^bRSA^BBjl (N, e) ^Slfl-ftX^ 
UERSA^BBd (N, e) #\ fJERSABf^*a<0 

1-K-c<D»M^ro*^ro^x hBifgx-/x:— tz-v sro^ 

fJERSA^Ifl^ (N, e) A^ilEfX hWfgX-/'?- 

*f ft - 1 * ft St <t 1" ft 41 S * h - ^ BBE*a » 

2 9] ilBRSAfill (N, e ) *t. HE 

rs ABt^iero-r^rro^M^ro^ro^x hnifgx 
lis WEf 7> h36«. 

Nf**«««fey*#<. 

el±N«fcy*#<. 

*1*«f*-4M*a2 8l=E*ffl*tt. 
[B*a 3 0] HE R S A tefflM ( N , e ) At. HE 
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lis mm<??-<7> 

NlifeSfitlgHfilcfcy. 

e liiiS-e if" o £ & x ^ z k 

&m t i-^.if*H2 8 [cte«0)*a o 

[B*H 3 1] ftJtE R S A ftffift ( N , e ) SufS 

rs AHi-^fraro-f^Tro&Bflgirojfc^fo^x hpjf^x 
-/<— try h<©gSi^&Sfrif5fr£*£-f SXt-;/:? 

ttct wmttzm *n 2 a ctetfflss. 

[«*S3 2] fiE^^TVhtf. 
fjERSA^gflSI (N, e) timti R S A$%mj nS,(Dt 
<<X<D'£ffim<D$lf&a)T-X hnf^X-/'?— by h<£>^* 

'>£:< ttfrlERSA^BBd (N, e) j3itf;<X7- 

LT/<7>->ptt*tiXf9?i, 
aiMSM-?? if >?BI» F PK £ P fc*SH F 

PK (p) tfiJERs A»§flii<£>> y-tz-i;£fii]<ogfft-e 

F PK ( P ) tffjtg R S A AMMO) > y *-5>ffi|l||a)K* 

^7>-9q5, IMBRSAfteMa» v-fe-S>ffilllla) 

qtWE*- /<l=S«-*-«XT?/^i:t*6l=*-*-« = 
k£ftWLk?Z>n$.m2 8[cE«ro*S„ 

3 3] fJE F „, ( p ) A<HE R S A ^§SH<7) 
> * - v£ PbI ro^lft X- $> * if' => £;*£-f & X =f 

piN 0ft*ftttft*< 1 l=» LUfr £ 5 A^SStSX 
x-v JZtfrz k £tt«ff SB *H 3 2 [=E«fl>* 

ft. 

[«#a3 4] pit. '>fc<<tt. WEtf- 

t 3 2 [=E«<D*ia. 

[B*H3 5] pli. £blC. 3WWK 

SB** 3 4lcE«ro*ft<, 
[B**3 6] fJK^7K7>hfr\ 
tfMERSAfcBMI (N, e) !&<lltMERSABmS55a)f 
^T03^PJ^03*^03^X KrI^X-/'?— by hro^H 

«Kt< irtfJKRSA^PJtl (N, e) J3«fctf/<X?- 
h*(Oli«t LT/<7>-*pt4«t6Xf??i. 
^BB»aiHT-y f pk £ P [=ttffl*-t*fcf£g F 

p K (p) A^frERSA^BBftoj^'yb-yaiaroSIII? 
fcSfrifdfr^^-fSx^y^i:. 



Fp K (p) ft<ifflERSA2HJB«<0>y-fe-i>£IHa>ISSi 

xfo&m-a. 

a*. HGRS A^BBftfl) > -b- i?aiH(OSJt«[= 7 
^A/illtLT, q= (p-a s ) mod N[=«fc 

[B** 3 7] fJlB F PK ( p ) tfffJK R s A^pjuro 

> y b- yaiHKOSHt? fcSfr i: 3 SX^f y 

^ y 7? £ # fc d i * ft<S i: 1" S B** 3 6 ic IB« 0) 7J 
;£„ 

[B**3 8] ptt. mE*- 
/^f>ftfiLf=/<7>-*m(DBi»t LT±fiKaF*lSc: 
t £ 1*« t itsb** 3 6 l=E«ffl*ao 

[SM3 9] pi*. HKWlc 

-1>B*II3 8I-E«CD7d;So 

[B*S4 1] WEf 7-fT>hA<s 
KIGRSA&lfltt (N, e) A^tfJERSABt^Sro-r 
^-C(O^PjB^(7)*^0^X hnf^X-/'?— b-y h(75g^ 

'J>£< £tflERSAfcM» (N. e) t/U^-h'O) 

»bb»smv f pk ^ P lefts *#fcisii f 

pk (p) A<ilERSAaBBj|©y -yfe-yffilHKDSIi-e 
FpK (p) A*iiERSAaBBj|©y •yfe-yaiUKOSli 
qf, fiERS A^p^roy vt-V&ffiO) 

k * \mk 2 s [=E«<o*ao 

[«M4 2] fJE/<X7-h*(Oli«(±. fJE/<X7 

- h*(D-*lRltt/\-v vzLHtfc-efo&z t *1*t»t -r SB 

**4 1 i:fiia)*a. 

43] bue c p ) mm r s A^ffieo) 

> v M- IHKOS* -e fc*3^ if 5 £ft£f i>X^ -v 
[1***4 4] pi*. 3&l=. ^S<it,. WE*- 
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££ftftff SB#9I4 1 lcE«£>£;£„ 

[Il*a4 6] ffJE<7^7>l-#. 
tfMERSAfcBMI (N, e) tffnERSABf^amf 

T*fti>ii£, 

'J>fc< ttfTERSA^BBft (N, e) k/iXV-£<D 

M»ka>M»k L^7^-$ P 54ii«xf ^ 

^BB»aiHT-y if >?||ft F PK £ p lcftffl£tf fc*SJI F 
PK (p) outers AaBflft<n>^-b-ySH<nsii-e 

f pk (p) ti<mmRSA<&ffiM<D*v-t-v£r<j\(D^m 

af, fJKRS AfcBflftfl)* •y-b-ySH<nSJtM[= : 5 
>mi*tLT, q= (p- a e ) mod NCi 

H***4 7] flIE/<x?-K<OBI»ra\ WE/<X9 

c«#a 4 8] ffiE f pk ( p ) *<fjE r s Aaema 

> * - i? ffi M <D X It -C ft « if" 5 fr£ 5* S f « X t v 

71*. 

a. 

m*a4 9i pi*. '>*<tt, fiE-y— 

<t * ttft <t -rail #« 4 e [=E«o)*a. 
msaso] pi*, ^bic. /j>fe<fct, urmk 

SB#«4 9[=E«<D*ia. 
lcE«OT*;£„ 

roir^Tro^lfltiroJfi^ro^x KrI^x-^— tz? hro 

fjE£^7> htf. flEftMfttfflE^X KrI^X- 
/■?-■ hro^-e^^t^Lfcii^. fjE^-TT 



5 3 ] i&E* 7^7>h;6S, fjE^PJUtf fj 
KTEf 7> h*«. 'J>fc < £ tfJE^PJtlfccfctMx 

p icftffl $ -tirfcilSS F PK ( P ) tffJE&PJSlro > iz- 
5? SHfflSII-l? ft S ^ if 3 f SXx 

i= *-r s z t £ ftft t 1- *n 5 2 [=E«<o*a » 

[«*«5 4] fuE^^7>h#\ FpK (p) tfflj 

e^bb«© > v m- y a r B iro^*t? ft a t as l 
u ^(3)*ss<tF PK (p) «hror B i-t?. »H«>v-fe-s? 

/\'tMt?>Xf'^i:S$bl:*t?iC 
[W*H5 5] ME?^7>htf. F PK (p) fitfl 

fJE*7-C7:/h*<. /<5Ji-*q*. flJEfcUMM)* 

a. 

[If *il 5 6 ] iJE-9— / q tfiJE^Bflgiro > v 

fJE-y— /W. q AWEttBfl*©* •yt-yffilUKDSsli 

ffiE-y— /W, q ^luE^Bfl^ro^ ■b-y^lHKOSli 
t*4tftSLfcf$. fJE-y— /W. fJE^rJ^fccfc 
t/HuE/^X^- Kfflllli Lt^7^-5 P ' 
-SX^-v^i:. 

KTE-y— /W, ^BBBffiHT-ybf^liRF^p' lc 
<fffl$-t±fcilSSF PK (p' ) A<luE^lflilro>-vb-v 

irE-y— /W. f pk ( P - ) A<HuE»Sfliiro>-vtz-v 

ffilHKOSsR-e&^tftSLfc*^. tuE^-/W. BEE 
^tggl-^X^-v^i:. 

fiE-y— /w. f pk ( P - ) immmmntvii-v 
ffiMroigsii-efcstftSLfca^. frE-y— /W. 
qiF pl ( P - ) troppir*. 'jttmm* v-b-v&mnm 
mnottzmftL. ^om^. frE^BB»i=wj£-rs 

^±)t-rax^-v^<!:. 



5 



r = h (a' ) *4(EtSXf'^t. 

m*a5 7i toe^-tt-vk^ 

a) F PK (p) A<i!([E^BB»(0>-ytr-i?SH<nS3li-e 

b) r=h (a) tfcSfri?5**ftStSXf»^ 
fc. 

a) sfciib) toe*^ 7 > 

a) fccfct/b) A<Jt-eftft*^. TOE<?^7>h#\ 

t=h' (a) BatiXf;^. 

t £TOK*-/<l=3M5*«x^ 

t Sttftff «« *S 5 6 l:Etffl*S. 

[B*a 5 s ] kie-9— t = h - ( a - ) -eft 
t = h' (a- ) -efc&ii£. toe*-a#\ saisa 

t*h' (a' ) TJfcSit^. TOE*- aSII£ffi 
JS5 7 [cEftOTTj;*,, 

[»*«5 9] WE*- /<fe«fetfWEf 7> h*< 
BIiE*ft*Lfc»*. TOE^Afc.fct/TOE^^T'V 

*>x t * b * d <t tw« <t -f £M#E 5 8 

lcE«ro*&o 

[«#* 6 0] TOE? 7 -f T > h *<, TOE'^ISil^TO 
IHfX hRTi»X-/<— fe? hfl)I*t*SiftSLfc* 

toe?^t> ttmti^mmt^^- 
toe? ^ r> hfr\ »bb«smv y tf>ygi« f pk £ 

P ir#ffl$-tJrfc!gSF PK ( P ) A<iIIEaBB«fl)>^-fe- 

b s c t t -t in *n 5 2 KKKrosa o 

Hf*il6 1] flE^7'TTVhA<, F PK (p) tfwl 

TOE?5K7> hfr\ frE^BBft*ffl^rfIEaBB«fl) 
L, ^(ofiatFp,, (p) t(0H-e. fcHMMf-fe-s? 

q £TOK*-/<l::i£ffi*5XT? 7£ 

t*i*«frsi»#9i6 oicE«<D*ja 0 

m*a6 2i toe?^t->^\ F PK ( P )^fi 

TOE^^TVhi^ /^^-^q^s frlE^BB«fl)> 



£*&l=*-f S;i££ftft£-f SB#JJI6 1 ICEK037J 

So 

M*S6 3] KTE-y— /W. qA<frE^BB»(0>-y 
■b-ySIUI«)S*Tfft5^i?5fr*ftSt5Xf«^ 
<t. 

toe*- /W, q ^toe»p*J8i<d> -vb-vsreiro^* 

■e&t^tftSLfcW^, TOE*- /W. BE^lgS-rS 

TOE*- /W. q A<TOE^PJ^(0> -v-tz-v£P B lro^H 
T?fc4*ft£Lfcii£. TOK*-/W. TOE^PJtltTO 

TOE*-/W\ »BB«SIW7 e>^BI» F PK £ P ' ic 
f^ffl^-arfeSSFp, (p' ) 4«mE»IB«a)>v-b-S> 

TOE*- /Ws F PK (p' ) 4<mE»IB«fl!»v-fe-S? 
£Mfflg*-l?&l^St£Lf::*l£. frlE-tJ— /W. SEE 
£Jg5"f Sx^y?^ 

TOE*-/Ws F PK (p' ) tfflE4MIM«>*?-fe-S? 

q<hF PK (p' ) troPslT*. ^BB«>^-b-yffiMffl» 

fMS«tffl^rtt#1-Sctl=J:-3r. a' 
£±J$-f3X^ 

r = h (a' ) SMtSXf'^i, 

r SHIBf 7-f T> hl=Slfll^6XTV^i:t*6l=* 

■f&ztztmttMmme 1 icEKro^a,, 

[|f*i!6 4] TOE^7^7>hA^ 

a) f pk (p) *<iiE»BBa©y -yt-ysMrosn-e 

b) r=h (a) ■efc«frifafrtftS-*-«XT--;^ 
a) Sfclib) j&<Jl-cttl*»*. WEf 7-rT>h*<. 

BE^g-rax^^t. 

a) fccfcl/b) tfJCefc**^ TOE<7 5K7-> htf. 
t=h' (a) £±l$,t&*Tv7t. 

t ^TOE-y—z^i^^f-r^x^-v^ir^^bicw-r^c 
t$i#»frs«#a6 3[=K«<D*jSo 

[»*JI6 5] TOE*-/N*A<. t=h' (a' ) -Pft 

t = h' (a' ) -eftS*^. TOE*-/^^\ SEE£9 

is-rsx^-y^i:. 

t^h' (a' ) t?fc4»^. TOE*-/W, SEE^S 

a e 4i=E«<o*a. 

[B*a 6 6 ] TOE*- Hfc =fc t/TOE-7 7 •< T > h A< 
BSE^S^LfcH-&, TOE*— /^fccb l^TOE^ 7 / f7V 



[ctE«037j;£o 
[0 0 0 1 ] 

[fSiB<0H-rsa«f»H] *fP.BI*, *»j h-9-^BEE 
fcJ;tfI3titlL, 1*l=, /<X7-h**a-e(passwor 
d-on I y) %± fc *@S * h 7 - * SEE «fc UMst & ? a 

[0 0 0 2] 

h^T'TTV h#*-> hr? — J/ -9— /<t7f-bXtSc 

s«»-eftSo bei±-«[=. *(Da*.<Diojai±*it 

B-fSd tic J: or jiff £*lS 0 

■ i-if^ao ■c^stro («7L(i/<xr7- K) 
« 

■ 3.— 9-*^f#- 3 -Cl'>S ; fc03, "f XT— h*— K 

0l]*J*\ Itiim&I (ATM) I*, Ztlbffl^ 
*.U)20, "f 3.— tftfft-DTl^StfT) (ATM 

(PIN: personal identification number) <h£5tB 
t%o A T MggfiEli, t-**«J h9-^7*ffii:r(OB 
EJjyt-fotSiJUl?**. *03SSl*, ATMIM 

flMmSitifc/N- KOiT-efcftt^&SFti-cfey, at 
/<i=<6a* set ami m **i-cn«frs»-cfc«. 

[0003] BEfcinji-c, H£&i*. t-**? h9 
+)— /WBBEStifctt, ££&iI1f^-v*;u£^rib03 

[0004] h9— 

r-ro j; a * ? h 9-^7 i:-c©biei*h 

St-efc-S„ fffllilt ^^'TTV ht-9— /<©rp1©Ji 

S„ $1*1**, ^fefcSTM*, Si I*, <7^7> ht-9— 
/ «© M 03 ills SI" S z. t \z & i X »ffi (7) If $g £ *p S 

ct^feSo a*^U7- pffimzta-Dtzm-B. am*, 

i£S(replay attack) <t l/> 5 ) » 'J^IWi^Sl*, £7 

^■et^Jft-efcSo ^otji*i*, i»i*, ittgro/^x^- 

7> h-frbSflft-f Stos (zroii^i*, Bt^fb^fifc/* 
x^-K) ^-9— /N*[ciitt-rtLi**d;^^b-efc-&„ 

1 oro^'T ^ro&Slcx^-^-r > 7 (spoof ing)i£S# 



TV hi*, KJE^-9— /^tfflfiLr^Stfii:**^ 31 

s» zrocfca&j&STH*, <??-<7> \-\m\zm®mm 

[0 0 0 5] £blc, /U7- KlcSo*<BK^n h=i 

14A<S>So S*»iASi:l*, gM03/-U9- HMcS-f Sl/> 
< o An 03 Httflt « [= *f L T , £ ft 03 pjf lit 03 fe S / i X 9 
- K (#i|tLI**, SlgS*»rt03^mig) £^x h 
l-Szil-cfc-oTUff^ruS, /<X?-R=*tt-4*-3 
<03ijc«T?feSo SHPtffBI*, $1*1**, ^icA^Rlfl^ 
±IE03^;£03?*,03 1 Ol=J:y»[=J:orBlS 
3*ifcflMrc*4. a— 9*I*LI**LI*\ SS[=3C^e> 

ri, ssi=«iai**is/<x9-h**a«-rsfctt. s» 
[oooe] * v v 9 bki- i± $ * ar* fcitflirtffi] 

b^TLNSo Z^b03tPb^TLNSKffil*, 2003^11 
[c^ltSctA<-e#S<, IS 1 035H1I*, '7^'T7'>h-> 
x^A±l-7^WlcfB'i^rLfcT-^£^gi:-rsS#i 
A^b^So K2(0»fili. hvX^A±[c 7 TC 
i^WI-f£'[i * W-=r-$ <h L&t^aiSfr b & So 
[0 0 0 7] »1©»HI=HLT. »ttni=GttdHfe 

t - * i= i* . ft l r »* * *ir r* & 6 & t^»*T - * 
(0||tlI*\ be*- /<t**-*-«iMS» »*-ei* 
jSi^a«**irr*iS6JSi^*7 : -* BE 
*-/<©»IB«) A ? fcSo ^■fri03^^^037jc^a<jf : - 

Ktt^-^03M73lcS^<BlI^P h-=i^£ffiffl-rSit 

-7?ic^i-sfesticj;y, fl6**<as*a(t^-r< 
t, /<x?-nc»-fs»*as!&<wi!e£&So -03m 

c^l*B#J^ci:^fcy, -HSIC, i/X^A(OiSJtA< 
1S< ^So 

[0008] n2'Am\z. /^x^- Km^BiiE^p e-=i 

;utnfl*HSo ^7^f7> h-lCTK^WiE'lT'-^^^ 
T?fcS^bT?fcSo ^7^7>htt, lEft/U^-h' 
*«ttt-4-t36«t?*4fc*(tT?J:lv ;l««JlcllLN/^X 
9- K 1^3121 fc££ttfc ot r/BE^Htt-r S t ^ 
a-tli^itLTLNSotai-S^S^t LtL^C^o L 

ifBEfi«fct;»SEift^p r-=i J iu^^<o^#tt-rs„ d 

^ib03^P E-=i;Hcol\TI*, D. Jablon, "Strong Pas 
sword-Only Authenticated Key Exchange", ACM Comput 
er Communication Review, ACM SIGCOMM, 26 (5) :5-20, 
1996, icfEK^^T^So Z^b03/^X9- K^M^P 
h =i )V 03 a *> ;± g I c fit "T S 1 03 1 c 1 1 Jil T 03 1 03 A< fe S o 
■ femtZMcmst^k (EKE: Encrypted Key Exchan 
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ge) (S. M. Bel lovinand M. Merritt, "Encrypted Key 
Exchange: Password-Based Protocols Secure Against 
Dictionary Attacks", Proceedings of the IEEE Symp 

osium on Research in Security and Privacy, pp. 72-8 

4, 1992, 

■HEKE (A-E KE : Augmented-EKE) (S. M. B 
ellovin and M. Merritt, "Augmented Encrypted Key E 
xchange: A Password-Based Protocol SecureAgainst D 
ictionary Attacks and Password File Compromise", P 
roceedings of the First Annual Conference on Comput 
er and Communications Security, 1993, pages 244-25 

■ftiEEKE (M-E KE : Modified EKE) (M. Stein 
er, G. Tsudik, and M. Waidner, "Refinement and Ext 
ens ion of Encrypted Key Exchange", ACM Operating S 
ystem Review, 29:22-30, 1995, £#fig) 

■ Keke (SPEKE: Simple Passwor 
d EKE) fccfcU^V ?Y ■ 'MUWE KE (DH-E K 

E : Diff ie-Hel I man EKE) (D. Jablon, "Strong Passw 
ord-Only Authenticated Key Exchange", ACM Computer 

CommunicationReview, ACM SIGCOMM, 26(5): 5-20, 199 

■ S^&'J^- K^P FnJU (S RP : Secu 
re Remote Password Protocol) (T. Wu, "The Secure 
Remote Password Protocol", Proceedings of the 1998 
Internet Society Network and Distributed System Se 
cur ity Symposium, pages 97-111, 1998, £#bb) 

■ 7|--^>tl£$i (OKE : Open Key Exchange) (Ste 
fan Lucks, "Open KeyExchange: How to Defeat Dictio 
nary Attacks Without Encrypting Public Keys", Secu 
rity Protocol Workshop, Ecole Norma I e Super ieure, 
April 7-9, 1997, £#fig) 

[0 0 0 9] 

■£-vh&ztbmwztxTi^j:^zfv&&„ mm. e 

keJu F=wHi, ^<-Dfr(Dmmmm£S:Wt^ 
Blfgtt^fe-i) (S. Patel, "Number Theoretic Attacks 
on Secure Password Schemes", Proceedings of the IE 
EE Symposium onResearch in Security and Privacy", 
pages 236-247, 1997, £#ss.) „ *y F^-^S^ti 

omw ti i= e * , %± -e fe s z. t #m m m & tt > < x - 

h**3&4BSBBE -J □ F =1 )\sti<>&m tZtiXl^&o 
[0 0 1 0] 

AI=m*&*i4fc£©4*IMMN**ai±. ivb«>4fiffl 
£TJE(usable)Bt^S ^fcttftlffcbfc 
l\ *v hi— >-y— /<I4. 4MMMN**3ei=«EoT4* 



BflU ■ $^nro*f£±i£L, ^nn^^'frv hies 
-/<— tz-^h (^«i*^a>) ©sii-efts^ifa^^a; 

SA^-f-X hRTsgX-/'?— tr-y hiO^-efc-S^iraAMc 
Sj1-&?^7> Flc ^5K7>FC:, +F 

-/ wa a &*a-ea«i l fc^nti^fitt l fcfr if a ^ 

(MM?**!.*. 

[0 0 1 1 ] *f6iBffl-SK5«-er±. ^7K7> Fir+F 
-AlilvTiit,. SBEg«n?flEffl£*iS 1 -3ffl/<X7- 
KfcBMrf*. ^©SlWCf*. f^TVhli, 

< tt«j3=t^U9 - fronts t lt/<7><-^ 
(p) ^stroi^^s.* vb-v&mommr' 

fc-Sii^, ^7 : 7l'7> F^\ aBB»*ffl^r^BB(l(0> 

(DSKSi:, f pk ( P ) fcronn-e. &BMMs/-tr-i?fflli] 
0>ft;S3t£S^T-f ^cirlCcfc-oT, h=uU*«fr* 
*i&o F PK (p) tf* vte- f J&ffi<Dmmx>ti:i\ 

a*. *5-r7:/n*BiE*ig5-*-«^ 

If IB $tttti-rs-t*<-e# S RTDBtttf fc S o ^© fc ft , 

-A'lciffg^Sb^&l^lc^p hn;U^fir-r*„ 

^'TTV hli, Z?P h=WKO&<OI55T?s +f— 

X 7 - K lc Wf S kit IB SS6^ttfT;#6<6o 

fct^ic, sasigg-fs. 
[0012] *%wro|g2iijfefii]-ei±, -y— /N'icfciti) 

- K£ Bf*#f. ^OttfrU [c-9— Hidi, F 

[001 3] *%w<Dn3ts&isn4(Dmmm\t. &m 

£UB»BB«i»^*at LT R s ABt^S£*Uffl1-&„ 
-CTCDRS A'£fflmo>M-&0>TX heimx-si—tv F 

o)S* -e fc -I) ^ if a "T -5 fc sb K R s a m M =f x 

F^!t7„ fci>ffi^, RSA>-yb-i?aiH(0 

^S-efc-S^ir^A^^-r-SfciftlcRS A@^^X F 
£ff?o «3Sffi«-er±. *-/W*^-«x9-h'^iE 
fi-rSo m4S»|T?li, +F-Hli, h'roSHS 

■c-fc^ffi^ffiit-r^o 



[0 0 14] 58iJH#r*, ^ftm\~^^mmMJa h=i 

ct^liaflLfco Sot, RSA@^roHJ6fii]-ei* s £ 
W#tt. *SBSH<©:?p ha;u*«RSAl«*ai:Biaft 
[c^^-e ft & z <t £1118 L fc z <t lc ft 3 „ ^(Dliajroffi 

[0 0 1 5] 

[0016] s?\ Bt^tsatoivcttis-r*. 
Bf^*a-er±. y?-fe-5?mr±, Bi^*c£±j5rf 

4. C = E K (m) ir^ft-So at^XCIi. 

WfflfcK£**rf a-#M-eS£i=aMS**i*. Bt^tX 

[0017] aBB«Bf^*a-ei*. (PK) fcJ; 

UW®m (SK) <n*f (pk, sk) A<S4-T4. AM 
»*«Wcr*tt< , K-et»BB«*ffl^r > v-fe-ym 

*flMHbLTC = E PK <m) i: ft* J: 5 fcHt^XC £± 
m=D SK (C) «!:«^pIfiit:-fc§o BHIXI*. &M 

[0 0 1 8] jaaOD^BBftBf^aOD 1 OCRS A#fc 
£>„ zttl*, R. Rivest, A. Shamir, L. Adleman, "AM 
ethod for Obtaining Digital Signature and Public K 
ey Cryptosystems", Communications of the ACM, vol. 
21, 120-126, 1978. iciEKStiT RSAtrl*. 
^Ifltll* (N, e) "CftiJ, »&£f* (N, d) T?ft 

*«ptq(Oai?fty N = p ■ q) . e 

(*, ei (p-1) ■ (q-1) 

S£5fc2 £y*#^ff«roii&-c:*fty, di*. e - ' m 
od (p-1) ■ (q-D t?fes„ at^ftr*li!!i*. 

E (m) = m e mod NtfelJ, {K^Blfttt. D 
(C) =C d mod NTJfcSo 

[0 0 19] ItbroiK OfrOTBf-^fflfjflCOl^-tia 

w-rso ^awtii, *£sfrc>jfc£T'x<Dii»f # 

-*lRlttli«-eftStr±. Srt03l-^T(7JxlC>PfLT f 

(x) £ft*-fS<or±8S-e&.6!&<. Trtroiit^iffl) 

y [eft LTIi, f (x) = yX'foZ>£oteSto<Dx£M. 

-*iRittli«(0-«r±. a»»a*-cfc«. p**#h 

*StU g£> mod p(Z)£&# C*-<tt>%. 

1 p - 1 ommom) o±i$.7ttt&o -r-s 

f (x)=g x mod p(4-«l=-*filttBl« 



II) tfeSo x-r7-r ■ ^;uv>^S^i:Pfli*^S^S 
j&^p h=WU (W. Diffie and M. Hellman, "New Direct 
ions in Cryptography", IEEE Transactions on Inform 
at ion Theory, vol.22, no. 6, 644-654, 1976. £# 
M) l±-fflBi»l=a£^^r^So JlftMlcli, 7'JXi: 
tH ^(0-#A<J5?(0 J; o \~W®M£&£t&o 7 'J X#\ 
7>yA&x£a«L. X = g x mod p*#?|: 
iSSo -75. *^(±. 7>^SyS»RL, Y = g y 
mod P £7 UXi:S5„ 7 'JXIiY x 

mod p <t LT. 7K^liX y mod piLT, 
tUM-«£i*<-C#« (Y x =X y =g xv mod p[C 
3*) o Sfc. f^7^ ■'V/UV Kftttft 

BI»©ft**<Bit^ftS-<Df6<DS l^<ofr 
CDffiRffif&SI) ±-t?tS^TRltg-t?fe-i>„ ^jSWIcI*. 
A£ s * b*£ T^rosns h a<7 vzl Mft-e 

lis hffltti*A<7>yAI=Mit.S. Sfcl*. '>fc<<ti 

^ a^ffi-i? ft s - 1 s ^ a o -« i= - «> «b a tA« * 5 

J5t*ntOMSfcl±. SHA-1 (F I PS 180-1, "Secure Hash 
Standard", Federal Information Processing Standar 
ds Publication 180-1, 1995. £#{£) . fc^tfR I p 
EMD-160 (H. Dobbertin, A. Bosselaers, B. Pr 
eneel, "R I PEMD-1 60 : a strengthened version of RIPE 
MD", in Fast Software Encryption, 3rd Intl. Worksh 
op, 71-82, 1996. £#SB) T?fc& 0 
[0 0 2 0] Bt-^TJSIot. ^(O^ttro 

m-V vzLfemCD^^tt/^^-^ t Ltk?rfflU (fcfc* 
L, 1/2 k l*JiS-e#SISi:>*L>i:<RS-r6) . » 

IC. RSA(7);4NliS^ i e-y h-eftfttfiSI-fto 
[0 0 2 1 ] *£IJIJ©«1 £ffifll=J:S4BSBBE:?P h 

=i;u^n 1 ~n2icjs-r„ 

Flc^-DTHtT^^LS., ^^^TVF-i: 
■9— /\*(7)Pp1(7)JH1 ^^-r„ C(B7P hn;KiJ:*ilf. +h 
-/«(*a»aa-*^7'f 7> hCWLtSEL. 
T> Flotg^g#^-9— /^|c^LTlgIjE-r-i)„ WIW^IE 

fes„ 

[0 0 2 2] ?u ha;utlB»-*-4iH=. ^7^7>F- 
i-tf--/<f***««*i»*L-Cl*4i:fijrr4. 

ss^^ro^ (pk, sk) ^±)ti-s„ 

<oa©±Jj£l±S*#l=fl»-eft l .K zzTMiiSiflL^ 
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*<©««) &m%?Zo /<X9-h**tt. ^7-T7>h 

fc-tJ— /<roim-e*in=Ksa?*isit*itfia6-r, 

S^#rfcSo 

[0023] jiiTro^p h=wn*, iJ— /N'fc.fct/^^'r 
r> h<offi*£EBE-f s„ lot, +J-- /N'fccfct;^^^ 

fcii^-Yrvho) t^-r*ifr*«»-e & « wifttt * * So 

^ £ ft o T ^ fc ^ * ^ -f 7 > h b «R& If I B * # «fc 5 fc 
LrSKDHiEfc-tf— /«D&"J £L£? > 

[0 0 2 4] S*#[=l±It*.[=i!fl&frfc«t:?[=. +J— /< 

fflii]ffliT-e»#-r s zfa y 7 a$ ttfc =1 > e ^.-^ fc l 

rUSiWflllrfcSo =i>t°zL-^^py^A=i- Kli. 

s„ ?^t> hir-y— /^ttx-^*^ h9-?*ai: 

rSlMciUrf *>„ Zfl)J:3S*v K9— ftttt^H 

fc. ^ay7A**ifc3>ea-*i*a*ti:iatfc 

[0 0 2 5] 0 1 ~@2ICfc^T. ^"P h=WU#T,Ste£ 
ftSfc, X^'7^1 1 0T% ^-/\'ttmf±«t*. - 
*U±, *t!?fl)7>mi*t'fcli 0 Ql*. 2 005^1 

a &ta>f*-«^t*<RriB-e*«. x^?i 

12T% *-/<!*. miPK^^'fTVhCMt 
So ±tE03ot7l-s +)— ?n h=i;KDBB*&f[[= 
(PK, SK) ro*f£±j£Lr^Sfc{5£-fS<, X^'7 
^1 1 4r\ -7^'TrVhlot, Xt^Z/I 1 2TJ-9— /\* 
frbgffiLfcmtfJIi^QlcJILr^Sfrfc*?*^ fcot 
tf. PK*«*§£' (&lUI;S:ft2) icJILTl^frfc'? 

^7'T7>hr*BIE*lg5-rS. X^-7^1 1 405 

fxhtt^7^7>hi:ot^titT^hi.„ ^roas 

S fa b 03 If $ g £ *P S - fc A< T? # S ot 7 I = m J: U P K 

£3itR l r ^ s wt h±a< fc s t> r fc s » 

[0 0 2 6] ZCt, PKil^£' KMI - SCfclDji 

< mft-t S fc fc t dflffi HMR£S 6 * <E L^fc Al=. fcBB 



Sl-$^tl05*f (PK, SK) |* % ^ffl^tLSft^O)^ 

®t^7JS £ ffl i^r ±jt ^ ^S1-^r 05 pif^oc^rj^oj 

£ (DSS-e fcS if a ^ S - fc #r 

fflSWrfcSo L^L S Jia'EC^PplrtlczOD^^-rS 

-r^ro5ttK£^-rs) liSnbtir^'Ec^o ^cr\ & 
amfe^BB«Bt^*ai3j:t;±xjiHiiBx-/<— tr-y h 

[0027] ^BB«Bt^*a*«jiffliilB-e*Sfcr±. £ 

05^05 4: 5 te TX hpHlt> A-/<— b-v he' A<#«-rS 

zfcrfcS„ 

1 . 1-^X05? K s £ ' CJstLT, s PK = | S PK | li k 

i=§ILTffi£ja3t«n?fcS cr«e*3*.. s PK 05^*05<i 
HSIikOD^JSSriifc^TlbtL^L'') o fcfc'L. s 

pkI*. PKfc. 1-^<T05Rlf^d:> v-fr-W^mttZ 
mto -05*^S PK £. 'Afflm (PK) 05>^iz-vS 

2. ffi«05PKI-^LT. PK££' rfcS^fc*77b^£ 

3. ■f'<r05PKS£' |C^Lr s S p( frb-||[:iO 

So 

4. -r-CTCOPKEE' [Cj5fLt. ffitroflalCOl'* 

r. a eSp K rfcSA->fc 7A^*S"rs^ilSB^rBl7;u 

=f'JX*A##£-fS„ 

5. -r-CTCOPKEE' CMLt. SlfcT?^ I + k, 

fo, D '$s«*frs*aaii#Mti-»RriiB&»BB 
•aim-?? f pk , fcj:t;^(os«*o!)»sij 
mi] 

Xpk,i u ■ ■ • U X PK , SpK U Zpif u Z' PK 

(C05»fiJI*P K[c05^fe#-r^,) A^ftLT, JUT© 

(a) s PK ii^ns^r B irftmnifgrfci, 0 

(b) i e |1 s PK } |:JtLt, F PK : X PK : 

-SpKli^mStrfcS (1-6*3*.. F PK ii, #*^x 

(c) ^*l^*l05a e SpK fcJ:U: i s [1 

s PK } CxtLt. F PK (x) ^affcSctaftxeX 

PK^^fts^iSie^PBiT-iurryXA^^-rSo 

(d) -^-^btLfcxs fO, 1} 'CSLT, xsZ PK 

tMMWtxez' ^rfeSA^^^x h-fS£« 
aSIH7;u=T'J XAA<#ii-rS„ 

(e) |xeZ K l:ilLt, F PK (x) sS PK r^^„ 

( f ) | Z' PK | /2"li. S^tt/^>-^ klcHL 
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(g) Ee£T*&i>Ji^, | Z PK U Z ' PK | / 2 " li s 

[0028] co5^fflBifgro^«i*. 
p K*m^x&mmmt£* <yk-*>(om*ifi % mmt 
hmc* v ■b-vomsizw l < fti> «fe a 

*t;J:a[=it*.[=tt;a-rs-t!!i<-e#ft, 

1 1 ± i=fiEffl-r s =fc a [=» *. i=»iE-r ft - <t A«Rrft-efc 

ft„ C^LT, S^iPKCSLt, Xfy?1 1 4t 
©fX ht> PKft £ fflfX r-nJfgX-H— tr-y h 

t-fflfx htftt-efcft (■*-&*>*, mi±«<nsii-efc 
fro, PKlie' ISEEIiSff 

ctftfr*,, m#Qrogirefti/>;!>\ *fcr±, pka< 
£' rogift-efti/o ti£, EEEiif ^'Ttv Hw«fcor 
*gg£;h-ft„ ^-/»P KfcftlMim^ilSft^aT? 

[0029] xf'^1 1 6t , o^jyy Mi, 

«^«<0 : 5>yA!£i:53(Si:L-C»S-r*. 
1 8T% O^JTy hi*, /«7^-5a?, 

> v -fe-^ffilH s PK ro 7 > f <t L r K£f ft„ 

20T% ^71"7> hi*. /^^-^ (p 
K, m, //, <D=7>#-L'\V isn-MMHt LT/i=7 

P £it3t-f ft, /\^i/iH«Hi*, 

ft Oft < it;?) *a*1-ft±EroJ:3&ffi*a>7> 

[0 0 3 0] Xf^1 2 2T:\ fc||fl«£IW7-:/ tf>y 
HHSFpK^plc^ffl^-arfcSSFp, (p) fr^-tz-v 
ffiMSmroKH-efcftj^ifafrtftS-*-*. p pk (p) 

frS PK OT^9ftT-ftl,MIB\ ISEEIilgg £*!,■!><, LfrU 
Xf 22t, F PK (p) eSpnT'^l^^^^tl 

fcH£, z<0B#£T*EfiE£&7rft<DI*S?£L< ftl\, 

* (?) a s i * , >? =j 4 7 > h # z <d m £ t? IS II * *§ 7 L fc 

i§£\ Siro-9— /W, K;r [co (7)161 bA^OT 

>hli, BEE£}gg-f ftt&^Lfcii^-C**,, +J— /<t 
ro^p h=wu£Sitf-f ftcirfrfc?* li\ fct, xf 
•y^i 2 2-ero^ x hA<*r*&i)ii^, <^-rr>hi* 

q = a iKStS. q = ai:IS^1-i> ( a I*. Xf?? 

1 1 8T% > -^-v^PelrollHlttl^V^Aft^lfti; 

- K 7r [c H f ft If f B * ?# ft - 1 fr ft < ft ft . X f v -J 1 

2 2T% F PK (p) eS PK £:;£££;h,fcii^ ^7 7 

> hl*s q — E PK (a) OF PK (p) £ itg"f ft CI <t [C 
J^TISEE^P h=UU£JIttS,, -Tftt)*. all&Mtt 

^ffl^TBt^-fb^tL. f pk (p) #\ -v-b-i? 

£IH<©i¥35*£ffli.n\ Bt^WSHlcfEffliTfto Xf7 

[0 0 3 1 ] Xf'^1 2 6T% +)— Hli, //£CA^ 



q eS„T'fcS^t* (/eSfftl*, 
Sfcl*, qeS^ftl^. t»— /<hmfiE£igg-f 
fto *3-CftlMi£, Xf'^1 2 8"C\ H 
(PK, m, u, 7r) 037>^A/N-vvzLSii! 
HiLT^7>-5p' £ttg-fft„ Z0)Xfy?12 

8i±. xf??i 2 o[z-o\,^xm~wtm\^tc(nt[~m'f! 

£ftfto Xf??1 3 0T% HI*, FpK ( p ' ) fr 
* ^iz-v^r B lS PK (7)^3|Tjfeft^<!:a^^;^L, S 
PKCD^HTJftl^ii^, +J— A'liEIiE^gg-f ft„ F 
PK (p' ) A<> ^iz-vSr B lS PK 05^||T?feftii^, IS 
IEI±fiti**lSo Xf'^1 3 2T% SSffi^ 
S K5fflUTq/Fp, (p' ) ^t^Citctot 

a' Sti-*-rs (zz-e/li, »H«>v-fe-S?ffillll© 

»a*©afr$*-r) . xf 34-c% ^ 

SW-*-rSo Xf7?1 3 6T% r ^^z>47 

> hlCiSfto 

[0032] Xf??138t, ^^'fTVUt F PK 
(p) eS PK frOr=h (a) T'fcft^i: 3 J^^ftSf 

ft„ ^ti&fflftft^MSttJfeftaa^i^Ey. 

'TTV hli-9— /\*£*IE-efcft<t LTSItAtLft,, ft 
fc\ F PK (p) eS PK -C*ft^ii^[cli s ^^^7>h-l± 
HCXti/?1 2 2-P-9— /<*S6ltA*ift^i:ftSL-C 
t^«*<. Wxf^1 2 2-ca>BD0>£5fr€>flMR£ 
^ft z t *«-e # ft ^ j: a [~m®. 1 p h =i jutmi l r ^ 

fcC^i^^ffcS. r=h (a) Of X Ht, 
■9— tWJE L L v<x 7- K 7r $ Rlf * Lt l^fcfr if 3 
fXhtS. -tWfcft, Xf";?1 3 8X\ F PK (p) 
eS„T*6:l^\ Sfcli. r^h (a) T?feftfcft[c-? 

£ t? IS BE A^g S $ ti fc £ * £ "f ft c t A< t? # ft L ^ o X 
3 8t\ ^^'TrVr-A^ /N*£gltA^ft 

t=h' (a) £fi3l1-ft 0 fcfcL, h' Ii5>^\ 
r>ii*tft4. Xf-^14 2t\ ^7^7>hli 

t £-9— /N*[C^ft 0 

[0 0 3 3] Xf 4 6ts +)— t = h ' 

(a' ) T'fcftfrifafr^^-f ft„ t=h' (a' ) 
T?fcftJf^> "9— /^liISIiE£®ltA^ft„ ^a-eftL^ii 
^-/N'l*ISE£}g§1-fto h-fccfctK-y— 
/W^-rtitISIiE£S;ltA^fcii^, Xf";?1 4 4 
T5\ f 5-r7>K±-tr?'>a>«*tt*L. Xf«;?1 
4 8tf. ^-/W-b?va>^£ttm-rfto -tz-vva> 

yt. ^ro^ro^ftjuiictorsa^w-efcfto -51 

KroiSS^t?, a©7^AAr>iBlh" tit. K 
= h" (a) irtt^^^fto Vtmmmmx\t. tr>3 
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>Hki*. v- /ifc&lf<7=7'(T> hroflWr?, z> 
-f ■ ^;uv>^p h^u^l^i:. mfcJ;L8^ 7 
-f ■^7>/<7>-5l:»RLT > ft3t£;tiSo Mi* 
#[=1*18 31=. tr>3 >H£ft3rf Sfctf) 

[0 0 3 4] Z05cfcai-LT, 111 ~|12|::Ol,M:iftBfl 

E^SJi-r-So a 1 ~a2[co^ruiiSLfc^p h=uu 

I*. ^-A*U7- K 7r £ pim Ltet=LTI,\ 

{s^lt^-So z©j;5fc:?p h=wuro 1 oroMS 
f^H-Si*. if— /<Effifii«(DS*ttA<fi«[=* b^fts 

* - <t # li= fc * - £ -e & * . z (73 =fc o fc»!6 i= *f f 

SffiSKOfcttl::. *§gliH<DJB 2 Slffiffl T?l±. "9— AI*A 

I tfil<DBI»-eft4ffix*E1fi-r4. sa I t Ml*, tt 

tSltCct^t, itiKDAx?- KKJff S|b]B#<05$ 
»*»*JSif4fcA[=ffiffl**i4afii<nffi-eft4. (ix 
lis 0^47^ hlcd;-o-c-9— a^t, 

+)■- /\*i*. x£*nsro,a.i7fcy. x<7)*Di§ifrb7r£;££ 
-f i>;zi:l*i?#&i,\ ^frvhl*. x?x = g [x] 
irLTitJt-fSo fcfe'L, g i*ffitt**ftatl-**<Btt& 
fci>ilc75±jS7c-r?fey s x = h' (jc, salt) r*fc 
y. h* i*-*iRitt7>yA/\^i/iH*«*i-. bi 
2 i=w Lfc* 1 sififfli=oL^r±Ei?siw Lt 

<DiPl*l=, +f— HI*. flEffl**i*«S<naBB«ie^* 
3(=tt?TftMtt-iftfftta>» (PK, SK) £±jSf 

So 

[0 0 3 5] JUT. *^BJ(7)m2SteffilC c fc.i)^P h=l 

05T% ^I'TVhi*. <^-rr> h<7)3.-+f«£+f- 
-/<[=3l*-«t[=«feoT^p h=uu£Bfli&-f S. x^y 
72 1 017. Qfl)7>yA6I*iLTmt 
1 2X\ V— /\*l*. 0 
9 i «[Ctt(S-f SXfccfcr/s a I t £E 
ttflMfrfeBW*-*. X^y?2 1 417. 
m. PKfccfct/sa I t £4/7-f7V hlCj^^o X^'i> 
72 1 617. <7^"(7> hi*. X^y72 1 417-9— 
b ® ffi L fc m Q KM L T ^ S if 5 K <fc 

tf, P Kfr'^X hnJigX-H— fey he' KMLT^S 
frif5fr£&£-f So -^b^X h<D^-r*l*»A««T7 

BBE(*fitTi**i. XtVJz 1 817. i/7-f7> 
hi*. Xf'^2 14-e^-/\^bffiLfcsa I tf 
fflUtx=H' (7r, salt) Itttlt*. fcfc'U 

17. ^I'TVhl*. /<7^-5^, »^SU)7>? 
A&^Hi: LTIS^L. X^-v72 2 2T7. 57'f7> 



hi*. /^>-£a£. > -V-tz-v£P B lS PK <757>?A 
&SSii:LTK£-f S, X^y72 2 4i7. 5?J7> 
hi*. (PK, m, jll, g x ) <D^>$.L'\ 

y72 2 41*. 11 Uteffirox^-v^l 2 0ir^**T7fo 

s#. zrom2itteffii?i*. p*as-rs(8(o/<7>- 

$CD 1 Oi LT^X?- h*;r£teffl-f Sttfry |c. /<X 

LTffflt?.. ^CD&. Xf'j?2 2 6, 2 2 8. fed: 
t/2 3 01*. ±i20Xf'^12 2. I2 4.fcd;t/1 

2 6 t?mh Lfcrot mmizm'ntiti&o 

[0 0 3 6] Xf 7?23 2t\ +)— HI*. * 
(PK, m, u, X) ro^V^A/N-yi/^SHSHirLT 

ffi(0X^y7l 2 8 i:^]4*T7foS#. 7.=rv^Z 3 2 17 
I*. fcfll & ttl^fcft. ft*>yi=. /\?<>;lH 

StO/^.*-* i: LTXjftffln. Xf'^2 3 4, 
2 3 6. fed: 1/2 3 8 1*. ±|Efl)Xf '^1 3 0.13 
2. fccfcl/1 3 4l7KiBLfc(0i:l^«i[=Sffl**lSo X 
7^2 4 0-!?, ^WO^^yAftfiiLtr^I 
R-fS. fcf£L. Wl*. ^S^-§>g r roffi^b^-i>+^ 

i=*#&«**4i:«ga)RriB&»*a)«*t*-*-. x 

f7?2 4 2t\ y$g'tfc<„ Xf'^24 41:, 

rfccfc^y^^^^T^hlCill^o Xf'^ 
2 4 61*. ±|Bi))Xf 7^1 1 3 8X°mWLtz<Dk®ffi 
l=Sff**l«. Xt'^2 4 8T% ^7fT>hl*t = 
h* (a, y x ) *tt*L. Xf7^2 5 Of. 
7> hi* t £-9— M*[::i£-io„ 

[0 0 3 7] X^-V ^2 5 417. "9— /<l*. t=h' 

(a' , x r ) r*fcs^if a^^ft^t" So t = h' 
(a' , x r ) T7fc-Sit£. -9— /N'liEii^SltAH 
-5„ ^at-^t^ii^. -9— /^l*EliE£Sg-ri.o ^^^r 
7 > h fc J: tf t^*i t HK£ 5 It A*ifc»*. 
Xt-^2 5 2T. 57^f7> hl*-tz-vva >H£it3f 
L. XT'^256t. *-/W-feV^a>tl*tt*f 
S 0 

[0 0 3 8] m 1 ~H2fccfcr/H3~|l4£#SSLT± 

E-e-tti-ftiKw Lfc*^a^rom 1 fcj;t;m2Steffi 

I*. ±ECD=fc3lcl£aBllEl?fe-i)i:^a^ft£;ifc-r / ^ 
HflHB^t*S t i t icffl b « SEE -J p h =i ;u-e fe 
4„ C(7)J;?^l£ffll[ffi'EC^PjB^Bt-^*j£roi ol*. /■« 

: 7>-5f*JUTi;ttiB-rs^<o!!iMo*ij«5ii=fieora« 

LfcRS A^PjflHSt^*ST7fe-i)„ 1UT. *^iS05m3 

<fc t/B 4 roiteffi i-oi^TijiiS-^-So j£3 Steffi i* . 

RS A£. ^-/N'lC/^X^- h'Tr^E'ft^^fc^PJ^Bt 
^*5Ci:LripJffl-rSo I4l»lli, ffiX^-9— 
Elt^tifcRS A^PJ^Bt^*i££fiJffl-r-So fcf£L. 
XI*. /-U?- h'Tri: s a I t fit (0I1IH& 17 fc So -05=fc 
3IC. m3fcJ;t;m4(75Steffil*. SU3J:U:i2ll 
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[0039] j*iTs *%w<D%3mmm~'o^x. 05 

&MSIP KI*2^(0/^7>-^ (N, e) frb#|j££ 
ft, WfflftSKI*2ffi(0/<7>-5' (N, d) frbtUt 
£ftS» •ffifflWfg^ff^RS A^r?fl^Bt-^*i£-Ci*s N 
l**#<, el*. (N, e) £*fl-oT^S##N<0ffii 
(OHHil rSLtei ( r - 1 ) ro«^^^HSA< 1 T* 

fcszi^iitfx h -f s c <t #-e#Si: 1^5 14ft £ 

£1-&Zttf&ik2*l&&Ol~s tefflMPK (N, e) 

liM^ftSo ^♦t*sff*-«t^<ofro)aa&*3asi= 
i=. a ad (pk, sk) <D*f£±iSL-ci^4i:fis-r 

So x^-y^3 0 2-c% if- /\*ii, Q<o^>?A&^H 

m, N, fc^tfe £^>C7> hlCj^-fSo HI (OX 

1 4C:-3l,vt:iiiSflLfc<J:-5[::. ^-"CTVh 
li, -9— AfrbgffiLfcmfccfcU^llglP KA<, 

» *< / < x 9 - k n iz m? * it a y » « * a & *a -c 

d ft b (0 ft £ iiJR-f S z <h [1 tf-f S ffiH iz m a T? fc S =fc 

hi*. 0 4 ft- /\>bg(3 LtzmtfmSQ 

izmisT^&frt'ofrs tS&U. P KtffX hpJfifeX- 

fc5T*-«. RSACctliSgtli, P Ktf^X hnf^X 
te-y he' lzmLTl^frk'?fr£&j£t& 1 o 
©*fttt, N fc=fctf e if 3 fr£ Sk 

Ns [2 I_2 , 2'] 
e<£ [2 1 , 2 I+1 ] 

ef±Xft-cfc« 

Nfc,fct/e!b<±rc<D*tt£*^T»fc-f»&, PKe 
£' -e*«. Zftb<0£Wot. N*H-#l=*#l\&» (N 

2 h2 ~ 2 1 (0 tBH A 1= & & if 3 tftSf * - 1 1= 
cfcU) , fccfctf, e*<N«fey*#t^ (e#2'~2 l+1 

a>«Brti=*«**ifafrtftS-*-«-i:i=«fey) <o^x 

h g5fl)Xf'^3 0 6[C;S-f l^-fftfrlO&tt 

#&"efcSii£, BfiEI*}§g£ftSo ^^tr^^ii^. 
?P h^JHiXf '>?3 0 8[Ciit% RSAlt 

ffl-ei±s pks£- -efe-s^ifaA^^-r-sta 1 o 

(OttffXham. ^lOttf f X hit 

N mod eteN-eSjyfflflfcl^ 

Nfc£I/e tfZftblDSH^-f^TjiSfc-fii^, PKe 

£' -efc-s„ 

[0 0 4 0] &fc, RS Am^OmMMX'\ts PKe 
e ' -C fe S if 5 frtftSt S fc * l=ttffl RTt Ifcfl&fl) 
XhStfcS, 0i|*.li\ eli^HS-efc-S^ifaA^^x 



mzm l ^ - 1 * «tB-r sxx h £!t a - 1 ^rtdi-c & 

S„ S*#-efctLl*\ RSAlt©l»ltPKG£' 

[0 0 4 1 ] X^vZ?3 0 8, 3 1 0, 3 1 2li^ft^ 
ft. ±f£<OH1 16, 118, 1 2 0T?ia 

ajLfclOir^lclltT^ftSo fefc\ X^y?1 2 0 

(ID icfcltSitgl*. xf'J?3i2 (05) i:i 
Lfct<oi:^i:-c*fcSA<. a 1 (o-jisrw^p Kii, as 

~m 6 (0 R S A@^(0Hg-t?lotN fc cfct; e TJHt&X. b 
ftSo ^(O^Xhli, F PK (p) tf, RSA^PJUfO* 
■y-tr-yffilBKDSS-eftS Cffcfr*,, F PK ( P ) ss 
PK ) frt'ofrZ&^t&o RSA@*<osifi«-er±. - 

ftl*. ptN (gcd) #1 iC^Ll^if 

3frtftS-*-«^ti=«feorsfiaF*i4. gcd (p, 

N) = 1 -efc&it^, F PK (p) eS PK T?fey, X^-^ 
?3 14f, ^^^7>hl±, q= (p-a e ) mod 

N^ff^-r-So gcd (p, N) * 1 -C*&Sif£. F 
PK (p) eS PK -t?^^L^f-^6, BEEI*}gS$tL-S„ 
L, a 1 ©Xf^1 2 2lC^LTSJtlca'<fccfc5l-, 
^©B#jjS-eBBES«7-rS©l*»*L< tjH\ ^(OilS 
I*. iStco-y— k^icolm: 

(0161 b frttSntt $ » S RmfittA< *S^6-Tf*S 0 tto 
T, ^7<-7>hli, BE*fi5-*-«i:ftSLfc»*-e 

1 4Tf(07 L X h^*-efc-Sii-&, 
7^7>hlot, q = a ttS< Ci:ICj;y, q^^'^- 
ySIHlroltRWlCT^yAftKJIIlcKS-rs,, X^->^ 
3 1 61?, ^^T^hl*, q ^"9— AlZ&mt 

[0 0 4 2] X^-v^3 1 8X\ "9— /S'li, eSifO 
q eSpnt-feSA^c!: -5A^;*S"f -5., q^S K X&& 

T'fcS) frifafrlO^X hi*, gcd (q, N) =-\X 

r*;ECL^\ Sfcli, gcd (q, N) 5MT?feSii£. 
-9— HliISiiE£jgg-f •!>„ X^-v^3 
2 0T?, "9— /S'li, /^^-•S! (N, e, m, X/ , TC) 

t5„ Xf'^3 2 2t\ "9— /<li, gcd (p' , 
N) = 1 T'fcSfrifafr^^-f SZirlC^y. F 

pk ( p ' ) ^RSAftllffl^ -viz-vSr B Ko^H-r?fe 
So gcd (p' , N) ^1-efcS 
ii^, F PK (p' ) liRSA^BB»<0>-yb-i?aiH(0 
■*-ei*S<. *-/<(4BE*lg5-r4. gcd 

(p' , N) =1T?foSJi£, F PK (p' ) liRSA^ 

mma* vt-v^momrnxfov. mmzmnzti 

S„ Xf'^3 2 4-e> V— Jilts (q/p' ) KfcfL 
TRS Am-^^StT-TSo X^-v^3 2 6-3 4 Oli, 
fWKl2fflXf-^1 3 4- 1 4 8i:^4«lcStT$ 
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ftS» C05B3S»II*RS A@^-efei>A<s F 

PK (p) GS p( -efc5^(!:5)i^^t5Xf 7^3 3 

0 (B2©Xf»;?1 3 8 icfcffc-fS) l:fclt5f X h 
r*. gcd ( P , n) =i-e*ft*»if3*»tftS-*-«- 

tied; y jiff £ft So 

[0 0 4 3] #£IErom4j|;5te0l][::ol/>T07~@8£ 
#B8LTliiSfl-f So +>— HI*, /^7-h*wj3«fet;s a 

1 tfi*DHS-e&Sffix£Kffi-fSo cftl*m2j|ffi« 
tlnHf-efc-So LfrU £2 jt&mffitfl&fflllffifc 

^BB»Bt^*at LTRSAMtS. H7IC 
fc^T, X^-y^40 2-C% -^I'TVM*. 3.— tf* 

/<l=a«^tl=«feo-C^P h=UU£M«rfS„ X 
f7?4 0 4T\ +)— $5ffl7^AfeIIiLT 
m£±j£-fSo X^-V^4 0 6r% V— /\*l*, ^f'^ 
4 0 2T?K{ILfca--tf«[cttJS-f 2>XfcJ:tf s a I t 
*E*««fr6SM»-*-«. xf-^4 0 8-e, -9— 

I*, iru N. e, fccfctfsa I t^^7-f7>K:S 

-So Xf^4l0t, ^i'TV M*. Xf';?4 0 
8 -e+f— /\> b SfS L fcmi<*^ QI-MLTl^Sfri: 7 
*\ fccfctf. ^MUlM. e^fX hnf^X-/'?— b h 
£' HJlL-t^Sfri: 7fr£;*£1"So CffiRSAl^ 
©SlSft-ei*. ^PJSItffX hRTi»X-/<— fe? he' 
icJlLTI^Sfri: ?MXf^ ?4 1 OlcfclfSf X h 
lis ±K<7)@5 it tlCtBiaflLfcXf ?3 0 6[Cfclt 
5fXh (Sfctt, ±lEroXfy?3 0 6ttt[cijiifl 
Lfcttf fX h) ir^CTrfoSo Xf'^4 12, 4 1 

4, fcj:(/4i6t, ^7-rr>hiot. *-ft^ft±iE<o 

II3<7)Xf';<:72 18, 220, fcj;tf2 2 2i:i:tl: 
Bt«Lfc«fc3l=L-C, /^>-^x. /i, a£±J&-f 
So Xf'^4 1 8T% •J'^'TTV hi*, z^*-* 
(N, e, m, fl, g x ) ©^VyA/N^i/iBiaHt 
LT/^^-^P^tf-Jt-r*. *l=. Xf";?4 2 0 
T% ^'I'TV hli, gcd (p, N) =-\T>fo&frH 
3^tftS-*-«^tl=«feo-C, F PK (p) eS PK t?feS 
i^l^S^L, ±lEOTIl5OTXf y^3 1 4 tit 
l-iftiSLfc(7)i:^4«lcJiSlc/^>-^ q£±j£-f So 
^03^, Xf7?4 2 2T% ^'I'TV hi*, ju, q£ 

[0 0 4 4] Xf'^42 4t, +J— /\*li, U<sQfr-D 
q eS PK T?foSfr<!:7fr£;££"f So q eS^fc^ 
irofrlOfX hl±, gcd (q, N) = 1 T?foSfr<!: 7 

fr£f x h-rsctiCcty^tpftSo iieQ-est^. 

**:(*. gcd (q, N) *1-T?foSii3\ 
§l££^So *5-eftL^»$, Xf^4 2 6t, * 
-/N*l*, (N, e, m, 0, X) ©7>^A 

/vy '>J.HISHt Lt;<7>-$ p' ^tt^-TSo 
i, Xf'j?42 8, 4 3 0, 4 3 2I*, ^-ft^ft|l5 
~g|6CDXf -v^3 2 2 S 3 2 4, 3 2 6 £: Infill:: jjff 
£ft, Xf'^434, 4 3 6I*, : E-ft-fftH4(0X7 L 



7^2 40, 2 4 2 ir^ttlcjjtf £ftS» 
[0 0 4 5] Xf7?4 3 8T\ If— Hi*, rtS&tfy 
£5?-<7> hlc£So Xf VZ?4 4 0-4 5 01*, * 
ft^'ftEl 4fflXf^2 4 6-2 5 6 ir^ttlcjjtf £ft 
So Xf'^440CF pl! (p) eSpK-efcSfrifafr 

©fx hii, gcd (p, n) = 1 -efcSfrifafr^f 

X h-fS Ztlcj;^ RS A@^<£>£;£T?|jtf£ftSo 
[0 0 4 6] *S£Sflro£Sfl#i*, ^SfllC^StSSUBE 
?P h=UU*, S^ir^S^lfl^Bt-^^Sir^fl^lcS 
^-trfeSzi^EBJLfco lit, RS A@^<£>|j»l 
T*l*, S£Sfl#l±, *S6Sfl©?P h=UUA<RS ABf^7JiS 

fiaj^K^a^So 

[0 0 4 7] *f6iBA<S^)Ei:4iSBBE^P h=WUT?foS 

-t^EW-rsfctt. ha;u««e±tt«>ilil*. ft 

Ml-I*, A*<h LTBt^-!bP^fccfctfBi^:££<>:Sv£ 

i«iTro*^roa*.ro 1 oA^zScta 

d, SSlc^LT^^^AlciHJR^ftfc/^xr?- Ktr^P 
hnj^vSa hf So 

1. i/>< ofrj)7 >^Aica^$ftfcfitA<»^-rs cr 

HL<frS) uttfSftlcjg-So zftl*, ^ 

2. J/Sj^B, M!T#6l»WT. Bi^tSlctf 

3. ±ieia^o zoms. ttf?p ha^saiwi* 

iS^jz/d-efeSct^iS^lciiEiS-rSo fcfc'L, W* 

T^f-i-^'Ec rx^-7oyj *»<o»-e&y. di* 
wnifcHx?- Krons-efcSo 

[0 0 4 8] ZZT?, gfc#, «SfjtT?£kl>e [cSfctLt, 

St*v/d + e-e^P h=wu£®s<t-f s» c^aw 

zftli. mic/^x^- h*£JiSL-C 
ftt? p y-r > l j: 7 1 -r S =fc y snt«i=K^«t*-e ^p 

h=i;u^SSSci:A<-e#Sci:^*ift-rs„ zftli^pj 
fgtrfcSct^^ft^ftlii^i-rSo ) croa^ffl^S 

SctA^-^SCtlc^So Ali. v5zl L^-^lc^f 
SSi^lttf-rSo E,, E 2 fccfct/E 3 ^±tE03 3O05* 

[ist2] 
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£Pi<£ 1 )+Pi(Sa£ 1 ) 

= ft(*,) + Pr(ff a E 2 a Ed + Pr(5 a E 2 a £, ) 

iSPr^ + Pi^HPtfSAS,) 

= PrW + Pr^ + PrCS^-Pr^) 

SPr(£ 1 )+Pr(£ 1 )+Pr(a|£ J ) 

*/T + Pr(£ 2 ) + (l) 

ffi-3t, Pr (E 2 ) ^e-jS-Cfty, cHliftllUt 
[0 0 4 9] 

[fSiB(0Jt!iS] Jil±ifi'<fc^i:<, *fSlfl[=<t:;h.tf. S 
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[112] t-/W/U'7- h*£IEH-f -SBBE^p h=WU 
[113] tf- /W. /<x7-h*<oii«-eftSfil*E«i-r 
[04] +J-- /W. /■sxr?- KrosifcTJfe-Sffl^tE'ft-r 
[05] ^-/W/U 1 ?- K£tBtrf -SEII^p h=WU 

<o r s a s^ronjfe^i £ ^-r ar- fe-5„ 

[06] +r-/W/<X9-K£iElI-f SBBE^p K =i 
CDR S A@£(OSifc0i|£^-f H-C-fc3„ 

[a?] +*-- /w. /<x7-h*(DBi«-ea!>sfii*iE«i-r 

•SagEE^P h=WKORSA@*r<O||Jte0i]£^-fa-efc 
[08] tf- /W. /<X7-KfflBi«-e*Sffl*E«if 
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wF FK (p)£S PK mD ( 
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